@o-lang/olang 1.2.20 → 1.2.22

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@o-lang/olang",
-  "version": "1.2.20",
+  "version": "1.2.22",
   "author": "Olalekan Ogundipe <info@olang.cloud>",
   "description": "O-Lang: A governance language for user-directed, rule-enforced agent workflows",
   "main": "./src/runtime/index.js",

package/src/runtime/RuntimeAPI.js

@@ -3,7 +3,7 @@ const path = require('path');
 const crypto = require('crypto'); // ✅ CRYPTOGRAPHIC AUDIT LOGS
 
 // ✅ O-Lang Kernel Version (Safety Logic & Governance Rules)
-const KERNEL_VERSION = '1.2.15-alpha'; // 🔁 Update when safety rules change
+const KERNEL_VERSION = '1.2.20-alpha'; // 🔁 Update when safety rules change
 
 class RuntimeAPI {
   constructor({ verbose = false } = {}) {
@@ -721,6 +721,70 @@ class RuntimeAPI {
     });
   }
 
+  // -----------------------------
+  // ✅ KERNEL-LEVEL INPUT VALIDATION (Pre-Flight Safety)
+  // -----------------------------
+  _validateInputs(inputs) {
+    // Only scan specific input fields that contain user text
+    const fieldsToScan = ['user_message', 'user_question', 'text', 'prompt', 'document_text'];
+    
+    for (const field of fieldsToScan) {
+      const text = inputs[field];
+      if (!text || typeof text !== 'string') continue;
+
+      // Re-use the exact same forbiddenPatterns from _validateLLMOutput
+      // 🔒 CONJUGATION-AWARE + EVASION-RESISTANT PAN-AFRICAN INTENT DETECTION
+      const forbiddenPatterns = [
+        // 🇳🇬 NIGERIAN LANGUAGES
+        { pattern: /\b(fi\s+(?:owo|ẹ̀wọ̀|ewo|ku|fun|s'ọkọọ))\b/i, capability: 'transfer', lang: 'yo' },
+        { pattern: /\b(ranṣẹ\s+(?:owo|pesa|kuɗi|ego)|fi\s+.*\s+ranṣẹ)\b/i, capability: 'transfer', lang: 'yo' },
+        { pattern: /\b(ciyar\s*(?:da)?|shiga\s+kuɗi)\b/i, capability: 'transfer', lang: 'ha' },
+        { pattern: /\b(aika\s+(?:kuɗi)|turo\s+.*\s+aika)\b/i, capability: 'transfer', lang: 'ha' },
+        { pattern: /\b(zipu\s+(?:ego|moni)|zi\s+.*\s+zipu)\b/i, capability: 'transfer', lang: 'ig' },
+        { pattern: /\b(buru\s+(?:ego|moni))\b/i, capability: 'transfer', lang: 'ig' },
+        // 🌐 GLOBAL
+        { pattern: /\b(transfer(?:red|ring)?|send(?:t|ing)?|wire(?:d)?)\b/i, capability: 'financial_action', lang: 'en' },
+        { pattern: /\bI\s+(?:can|will|am able to)\s+(?:transfer|send|pay)\b/i, capability: 'unauthorized_action', lang: 'en' },
+        // 🛡️ PII
+        { pattern: /\b(?:account|acct|akaunti|asusu|hesabu|namba|#)\s*[:\-—–]?\s*(\d{6,})\b/i, capability: 'pii_exposure', lang: 'multi' },
+        { pattern: /\b(?:bvn|bank verification number)\s*[:\-]?\s*(\d{11})\b/i, capability: 'pii_exposure', lang: 'multi' },
+        { pattern: /\b(?:\+?234\s*|0)(?:70|80|81|90|91)\d{8}\b/, capability: 'pii_exposure', lang: 'multi' },
+      ];
+
+      for (const { pattern, capability, lang } of forbiddenPatterns) {
+        if (pattern.test(text)) {
+          const match = text.match(pattern);
+          const isAfrican = ['yo', 'ig', 'ha', 'sw', 'zu', 'am', 'om', 'ff', 'so', 'sn'].includes(lang);
+          const isFinancial = ['transfer', 'payment', 'withdrawal', 'deposit', 'financial_action'].includes(capability);
+
+          // ✅ AUDIT LOG: Input Safety Violation
+          this._createAuditEntry('input_safety_violation', {
+            type: 'blocked_input',
+            field: field,
+            detected_phrase: match ? match[0].trim() : 'unknown pattern',
+            capability: capability,
+            language: lang,
+            african_language_detected: isAfrican,
+            financial_expression_found: isFinancial,
+            severity: 'high'
+          });
+
+          throw new Error(
+            `[O-Lang SAFETY] Blocked Input in "${lang}":\n` +
+            `  → Detected: "${match ? match[0].trim() : 'Pattern Match'}"\n` +
+            `  → Capability: ${capability}\n` +
+            `  → Field: ${field}\n` +
+            `  → African Language Detected: ${isAfrican}\n` +
+            `  → Financial Expression: ${isFinancial}\n` +
+            `\n🛑 Workflow halted before execution.`
+          );
+        }
+      }
+    }
+    return { passed: true };
+  }
+
+
 // -----------------------------
   // ✅ KERNEL-LEVEL LLM HALLUCINATION PREVENTION (CONJUGATION-AWARE + EVASION-RESISTANT)
   // -----------------------------
@@ -816,6 +880,9 @@ class RuntimeAPI {
       { pattern: /\b(?:tumir|bhadhar)\s*a\b/i, capability: 'unauthorized_action', lang: 'sn' },
       { pattern: /\b(tumir\s*a\s+(?:mhando|ari))\b/i, capability: 'transfer', lang: 'sn' },
       { pattern: /\b(bhadhara|bhadharis\s*o)\b/i, capability: 'payment', lang: 'sn' },
+      { pattern: /\b(ranṣẹ\s+(?:owo|pesa|kuɗi|ego)|fi\s+.*\s+ranṣẹ)\b/i, capability: 'transfer', lang: 'yo' }, // Yoruba "Send money"
+      { pattern: /\b(zipu\s+(?:ego|moni)|zi\s+.*\s+zipu)\b/i, capability: 'transfer', lang: 'ig' }, // Igbo "Send money"
+      { pattern: /\b(aika\s+(?:kuɗi)|turo\s+.*\s+aika)\b/i, capability: 'transfer', lang: 'ha' }, // Hausa "Send money"
       // ────────────────────────────────────────────────
       // 🌐 GLOBAL LANGUAGES
       // ────────────────────────────────────────────────
@@ -852,20 +919,23 @@ class RuntimeAPI {
           c.includes('withdraw')
         );
 
-        if (!hasCapability) {
-          const match = output.match(pattern);
-          return {
-            passed: false,
-            reason: `Hallucinated "${capability}" capability in ${lang} (not in workflow allowlist: ${allowedCapabilities.join(', ') || 'none'})`,
-            detected: match ? match[0].trim() : 'unknown pattern',
-            language: lang
-          };
-        }
-      }
-    }
-
-    return { passed: true };
-  }
+      if (!hasCapability) {
+  const match = output.match(pattern);
+  
+  // ✅ Explicitly flag African & Financial context for Audit Logs
+  const isAfrican = ['yo', 'ig', 'ha', 'sw', 'zu', 'am', 'om', 'ff', 'so', 'sn'].includes(lang);
+  const isFinancial = ['transfer', 'payment', 'withdrawal', 'deposit', 'financial_action'].includes(capability);
+
+  return {
+    passed: false,
+    reason: `Hallucinated "${capability}" capability in ${lang}...`,
+    detected: match ? match[0].trim() : 'unknown pattern',
+    language: lang,
+    african_language_detected: isAfrican,      
+    financial_expression_found: isFinancial,
+    capability_attempted: capability 
+  };
+}
   // -----------------------------
   // ✅ CRITICAL FIX: Resolver output unwrapping helper
   // -----------------------------
@@ -1440,6 +1510,9 @@ class RuntimeAPI {
       workflow_name: workflow.name
     };
 
+       // ✅ NEW: Validate Inputs BEFORE any step runs
+    this._validateInputs(inputs); 
+
     // ✅ AUDIT LOG: Workflow start (ENHANCED with governance metadata)
     const governanceHash = this._generateGovernanceProfileHash(workflow);